SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
eVisit is seeking a hands-on full-stack Software Engineer with a primary focus on security remediation. This role bridges security engineering and application development, combining vulnerability remediation with ongoing feature development.
In the security remediation phase, you will own end-to-end vulnerability fixes identified through penetration testing and security assessments. Responsibilities include triaging vulnerabilities, analyzing session traffic and API behavior using browser developer tools, identifying over-exposed or sensitive data flows, and implementing fixes across the Ruby on Rails backend, React frontend, and containerized AWS infrastructure (Fargate). You will work closely with engineering and design teams to translate security findings into concrete Technical Requirements Documents (TRDs) and ensure fixes are durable design requirements rather than one-off patches. You will also review and harden session management practices, assess real-time and API-driven features (including Pusher and AnyCable), and produce thorough documentation of vulnerabilities, root causes, and remediation steps. As the security backlog stabilizes, you will contribute to application development, bringing a security-minded perspective to new features and helping the team avoid reintroducing known vulnerability classes.
The role requires strong full-stack capabilities, security engineering expertise, and the ability to communicate technical security findings to both engineering and non-technical stakeholders. You will also support FedRAMP compliance discussions, contributing security context and vocabulary to compliance-related requirements.
REQUIREMENTS:
- 5+ years of hands-on software engineering experience with broad full-stack work across multiple applications and technology layers
- 5+ years of experience in security engineering or closely related role
- Working proficiency in Ruby on Rails and React
- Experience with containerized environments, AWS, and Fargate
- Solid API experience, including RESTful API design and security considerations
- Hands-on experience with Pusher and AnyCable, or comparable real-time messaging technologies
- Knowledge of Ruby data models and how schema and query design affect performance and scalability
- Proven experience remediating vulnerabilities identified through penetration testing
- AWS Security certification (e.g., AWS Certified Security – Specialty)
- General familiarity with FedRAMP framework and vocabulary
- Comfortable using browser developer/code inspection tools to inspect network and session traffic
- Ability to identify over-exposed information between backend and frontend and explain risks clearly
- Ability to translate security findings into actionable design requirements
- Strong written communication skills for documenting vulnerabilities and technical requirements for engineering and non-technical audiences
- Solid understanding of session management principles and common pitfalls
NICE TO HAVE:
- Experience with Pulumi for infrastructure as code
- Python experience
- SQL skills
- Active or eligible for security clearance
